@claude-flow/cli 3.32.8 → 3.32.10

package/package.json

@@ -1,135 +1,137 @@
-{
-  "name": "@claude-flow/cli",
-  "version": "3.32.8",
-  "type": "module",
-  "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
-  "main": "dist/src/index.js",
-  "types": "dist/src/index.d.ts",
-  "sideEffects": false,
-  "bin": {
-    "cli": "bin/cli.js",
-    "claude-flow": "bin/cli.js",
-    "claude-flow-mcp": "bin/mcp-server.js"
-  },
-  "homepage": "https://github.com/ruvnet/claude-flow#readme",
-  "bugs": {
-    "url": "https://github.com/ruvnet/claude-flow/issues"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/ruvnet/claude-flow.git",
-    "directory": "v3/@claude-flow/cli"
-  },
-  "keywords": [
-    "claude",
-    "claude-code",
-    "anthropic",
-    "ai-agents",
-    "multi-agent",
-    "swarm",
-    "mcp",
-    "model-context-protocol",
-    "llm",
-    "cli",
-    "orchestration",
-    "automation",
-    "developer-tools",
-    "coding-assistant",
-    "vector-database",
-    "embeddings",
-    "self-learning",
-    "enterprise"
-  ],
-  "author": {
-    "name": "RuvNet",
-    "email": "ruv@ruv.io",
-    "url": "https://ruv.io"
-  },
-  "license": "MIT",
-  "exports": {
-    ".": {
-      "types": "./dist/src/index.d.ts",
-      "import": "./dist/src/index.js"
-    },
-    "./dist/*": "./dist/*",
-    "./ruvector": {
-      "types": "./dist/src/ruvector/index.d.ts",
-      "import": "./dist/src/ruvector/index.js"
-    },
-    "./ruvector/*": {
-      "types": "./dist/src/ruvector/*.d.ts",
-      "import": "./dist/src/ruvector/*.js"
-    },
-    "./mcp-tools": {
-      "types": "./dist/src/mcp-tools/index.d.ts",
-      "import": "./dist/src/mcp-tools/index.js"
-    },
-    "./memory": {
-      "types": "./dist/src/memory/memory-initializer.d.ts",
-      "import": "./dist/src/memory/memory-initializer.js"
-    },
-    "./intelligence": {
-      "types": "./dist/src/memory/intelligence.d.ts",
-      "import": "./dist/src/memory/intelligence.js"
-    }
-  },
-  "files": [
-    "dist",
-    "!dist/**/*.map",
-    "!dist/**/*.tsbuildinfo",
-    "bin",
-    "scripts/postinstall.cjs",
-    ".claude",
-    "plugins",
-    "README.md",
-    "catalog-manifest.json"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "test": "vitest run",
-    "test:plugin-store": "npx tsx src/plugins/tests/standalone-test.ts",
-    "test:pattern-store": "npx tsx src/transfer/store/tests/standalone-test.ts",
-    "postinstall": "node ./scripts/postinstall.cjs",
-    "prepublishOnly": "node scripts/prepare-publish.mjs",
-    "release": "npm publish --access public --tag latest",
-    "release:alpha": "npm version prerelease --preid=alpha && npm run publish:all",
-    "publish:all": "./scripts/publish.sh"
-  },
-  "devDependencies": {
-    "typescript": "^5.3.0",
-    "vitest": "^4.1.0"
-  },
-  "dependencies": {
-    "@claude-flow/cli-core": "3.7.0-alpha.5",
-    "@claude-flow/mcp": "3.0.0-alpha.8",
-    "@claude-flow/neural": "3.0.0-alpha.9",
-    "@claude-flow/shared": "3.0.0-alpha.7",
-    "@noble/ed25519": "2.3.0",
-    "@ruvector/rabitq-wasm": "0.1.0",
-    "semver": "7.7.3",
-    "sql.js": "^1.13.0",
-    "yaml": "^2.8.0"
-  },
-  "optionalDependencies": {
-    "@claude-flow/memory": "^3.0.0-alpha.21",
-    "@claude-flow/security": "^3.0.0-alpha.12",
-    "agentdb": "^3.0.0-alpha.17",
-    "agentic-flow": "^3.0.0-alpha.1",
-    "ruvector": "^0.2.27"
-  },
-  "publishConfig": {
-    "access": "public",
-    "tag": "latest"
-  },
-  "overrides": {
-    "protobufjs": ">=7.5.6",
-    "js-yaml": ">=4.3.0",
-    "express": ">=4.22.2",
-    "qs": ">=6.15.2",
-    "@opentelemetry/core": ">=2.8.0",
-    "@opentelemetry/resources": ">=2.8.0",
-    "@opentelemetry/sdk-trace-base": ">=2.8.0",
-    "@opentelemetry/sdk-node": ">=0.220.0",
-    "agentdb": "$agentdb"
-  }
-}
+{
+  "name": "@claude-flow/cli",
+  "version": "3.32.10",
+  "type": "module",
+  "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
+  "main": "dist/src/index.js",
+  "types": "dist/src/index.d.ts",
+  "sideEffects": false,
+  "bin": {
+    "cli": "bin/cli.js",
+    "claude-flow": "bin/cli.js",
+    "claude-flow-mcp": "bin/mcp-server.js"
+  },
+  "homepage": "https://github.com/ruvnet/claude-flow#readme",
+  "bugs": {
+    "url": "https://github.com/ruvnet/claude-flow/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ruvnet/claude-flow.git",
+    "directory": "v3/@claude-flow/cli"
+  },
+  "keywords": [
+    "claude",
+    "claude-code",
+    "anthropic",
+    "ai-agents",
+    "multi-agent",
+    "swarm",
+    "mcp",
+    "model-context-protocol",
+    "llm",
+    "cli",
+    "orchestration",
+    "automation",
+    "developer-tools",
+    "coding-assistant",
+    "vector-database",
+    "embeddings",
+    "self-learning",
+    "enterprise"
+  ],
+  "author": {
+    "name": "RuvNet",
+    "email": "ruv@ruv.io",
+    "url": "https://ruv.io"
+  },
+  "license": "MIT",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "import": "./dist/src/index.js"
+    },
+    "./dist/*": "./dist/*",
+    "./ruvector": {
+      "types": "./dist/src/ruvector/index.d.ts",
+      "import": "./dist/src/ruvector/index.js"
+    },
+    "./ruvector/*": {
+      "types": "./dist/src/ruvector/*.d.ts",
+      "import": "./dist/src/ruvector/*.js"
+    },
+    "./mcp-tools": {
+      "types": "./dist/src/mcp-tools/index.d.ts",
+      "import": "./dist/src/mcp-tools/index.js"
+    },
+    "./memory": {
+      "types": "./dist/src/memory/memory-initializer.d.ts",
+      "import": "./dist/src/memory/memory-initializer.js"
+    },
+    "./intelligence": {
+      "types": "./dist/src/memory/intelligence.d.ts",
+      "import": "./dist/src/memory/intelligence.js"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/**/*.map",
+    "!dist/**/*.tsbuildinfo",
+    "bin",
+    "scripts/postinstall.cjs",
+    ".claude",
+    "plugins",
+    "README.md",
+    "catalog-manifest.json"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:plugin-store": "npx tsx src/plugins/tests/standalone-test.ts",
+    "test:pattern-store": "npx tsx src/transfer/store/tests/standalone-test.ts",
+    "postinstall": "node ./scripts/postinstall.cjs",
+    "prepublishOnly": "node scripts/prepare-publish.mjs",
+    "release": "npm publish --access public --tag latest",
+    "release:alpha": "npm version prerelease --preid=alpha && npm run publish:all",
+    "publish:all": "./scripts/publish.sh"
+  },
+  "devDependencies": {
+    "typescript": "^5.3.0",
+    "vitest": "^4.1.0"
+  },
+  "dependencies": {
+    "@claude-flow/cli-core": "3.7.0-alpha.5",
+    "@claude-flow/mcp": "3.0.0-alpha.8",
+    "@claude-flow/neural": "3.0.0-alpha.9",
+    "@claude-flow/shared": "3.0.0-alpha.7",
+    "@noble/ed25519": "2.3.0",
+    "@ruvector/rabitq-wasm": "0.1.0",
+    "semver": "7.7.3",
+    "sql.js": "^1.13.0",
+    "yaml": "^2.8.0"
+  },
+  "optionalDependencies": {
+    "@claude-flow/memory": "^3.0.0-alpha.21",
+    "@claude-flow/security": "^3.0.0-alpha.12",
+    "agentdb": "^3.0.0-alpha.17",
+    "agentic-flow": "^3.0.0-alpha.1",
+    "better-sqlite3": "^12.9.0",
+    "ruvector": "^0.2.27"
+  },
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "overrides": {
+    "protobufjs": ">=7.5.6",
+    "js-yaml": ">=4.3.0",
+    "express": ">=4.22.2",
+    "qs": ">=6.15.2",
+    "@opentelemetry/core": ">=2.8.0",
+    "@opentelemetry/resources": ">=2.8.0",
+    "@opentelemetry/sdk-trace-base": ">=2.8.0",
+    "@opentelemetry/sdk-node": ">=0.220.0",
+    "agentdb": "$agentdb",
+    "better-sqlite3": "^12.9.0"
+  }
+}

package/plugins/ruflo-metaharness/.claude-plugin/plugin.json

@@ -1,32 +1,32 @@
-{
-  "name": "ruflo-metaharness",
-  "description": "MetaHarness integration for ruflo — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150's architectural constraint that MetaHarness remains an optional augmentation, never a required runtime dependency",
-  "version": "0.1.1",
-  "author": {
-    "name": "ruvnet",
-    "url": "https://github.com/ruvnet"
-  },
-  "homepage": "https://github.com/ruvnet/ruflo",
-  "license": "MIT",
-  "keywords": [
-    "ruflo",
-    "metaharness",
-    "harness",
-    "scaffolding",
-    "scorecard",
-    "genome",
-    "mcp-scan",
-    "threat-model",
-    "router",
-    "adr-150",
-    "adr-148",
-    "adr-149",
-    "optional-dependency",
-    "graceful-degradation",
-    "subprocess",
-    "namespace-routing",
-    "verified",
-    "ci",
-    "phase-1-mvp"
-  ]
-}
+{
+  "name": "ruflo-metaharness",
+  "description": "MetaHarness integration for ruflo — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150's architectural constraint that MetaHarness remains an optional augmentation, never a required runtime dependency",
+  "version": "0.1.1",
+  "author": {
+    "name": "ruvnet",
+    "url": "https://github.com/ruvnet"
+  },
+  "homepage": "https://github.com/ruvnet/ruflo",
+  "license": "MIT",
+  "keywords": [
+    "ruflo",
+    "metaharness",
+    "harness",
+    "scaffolding",
+    "scorecard",
+    "genome",
+    "mcp-scan",
+    "threat-model",
+    "router",
+    "adr-150",
+    "adr-148",
+    "adr-149",
+    "optional-dependency",
+    "graceful-degradation",
+    "subprocess",
+    "namespace-routing",
+    "verified",
+    "ci",
+    "phase-1-mvp"
+  ]
+}

package/plugins/ruflo-metaharness/README.md

@@ -1,72 +1,72 @@
-# ruflo-metaharness
-
-MetaHarness integration plugin for ruflo. Surfaces the upstream `metaharness` / `harness` / `@metaharness/darwin` CLIs through eleven ruflo skills, honoring [ADR-150](../../v3/docs/adr/ADR-150-metaharness-integration-surfaces.md)'s architectural constraint that MetaHarness must remain a removable augmentation — never a required runtime dependency.
-
-## ADR-150 architectural constraint (load-bearing)
-
-**Ruflo remains operational if every MetaHarness package is removed.** Every code path in this plugin satisfies four rules:
-
-1. **Removable** — no static `import '@metaharness/*'` outside the optional-router path in `v3/@claude-flow/cli/src/ruvector/neural-router.ts`.
-2. **Optional in package.json** — `metaharness` is in `optionalDependencies`, never `dependencies`.
-3. **Graceful degradation** — every script catches `MODULE_NOT_FOUND`/network failure and emits `{ degraded: true, reason: 'metaharness-not-available' }` JSON, exits 0. The graceful path is the default behavior, not a special case.
-4. **CI gate** — `no-metaharness-smoke.yml` runs the plugin smoke with `npm install --no-optional` and asserts the contract still passes.
-
-## Skills
-
-| Skill | Usage | Description |
-|-------|-------|-------------|
-| `harness-score` | `/harness-score [--path .] [--alert-on-fit-below 70]` | 5-dim readiness scorecard (harnessFit/compile/coverage/safety/memory + cost) |
-| `harness-genome` | `/harness-genome [--path .] [--alert-on-risk-above 0.5]` | 7-section categorical report (repo_type/topology/risk/mcp/test/publish) |
-| `harness-mcp-scan` | `/harness-mcp-scan [--path .] [--fail-on high]` | Static MCP security findings — pure-read, no dispatch |
-| `harness-threat-model` | `/harness-threat-model [--path .] [--fail-on high]` | Enterprise-grade threat model (clean/low/medium/high + findings) |
-| `harness-mint` | `/harness-mint --name <id> --template <id> [--confirm]` | Scaffold a custom harness; DRY-RUN by default; refuses project-root writes |
-| `harness-similarity` | `/harness-similarity --a a.json --b b.json [--per-dimension] [--alert-below 0.5]` | ADR-152 §3.1 weighted similarity between two harness fingerprints (cosine + categorical + jaccard) |
-| `harness-oia-audit` | `/harness-oia-audit [--path .] [--alert-on-worst high] [--dry-run]` | Composite Phase-2 audit (oia-manifest + threat-model + mcp-scan) into `metaharness-audit` namespace |
-| `harness-drift-from-history` | `/harness-drift-from-history [--baseline-since 7d] [--threshold 0.95]` | 1-command drift detection — composes audit-list + oia-audit + audit-trend |
-| `harness-bench` | `/harness-bench --op create\|verify --repo <path>` | Manage `@metaharness/darwin` bench suites — fixed evaluation corpora for `harness-evolve` |
-| `harness-evolve` | `/harness-evolve --repo <path> [--generations 3] [--sandbox real\|mock\|agent]` | Run `@metaharness/darwin evolve` — mutate seven policy surfaces, sandbox-score variants, promote measured wins |
-| `harness-security-bench` | `/harness-security-bench [--population 2] [--cycles 1] [--alert-on-fail]` | "Darwin Shield" / ADR-155 — evolve a security-detection harness against a 10-vuln corpus |
-| `harness-learn` | `/harness-learn --host <h> --model <m> --slice <manifest> [--repo <checkout>] [--run]` | metaharness@0.3.0 / upstream ADR-235 — GEPA learning run; $0 dry-run default, `--run` to spend; needs a metaharness repo checkout |
-| `harness-gepa` | `/harness-gepa --op genome\|validate\|render\|analyze [--path <genome.json>]` | darwin@0.8.0 GEPA library surface — genome load/validate/render + transcript failure analysis; `gepaOptimize` stays library-only |
-
-## Phase-0 baseline (ruflo itself, 2026-06-16)
-
-```json
-{
-  "harnessFit": 82,
-  "compileConfidence": 100,
-  "taskCoverage": 79,
-  "toolSafety": 100,
-  "memoryUsefulness": 40,
-  "estCostPerRunUsd": 0.048,
-  "recommendedMode": "CLI + MCP",
-  "archetype": "typescript-sdk-harness",
-  "template": "vertical:coding",
-  "scaffoldReady": true,
-  "risk_score": 0.27,
-  "publish_readiness": 0.9
-}
-```
-
-## Architecture
-
-All skills use subprocess invocation through the `_harness.mjs` shared helper:
-
-```
-skills/X/SKILL.md → scripts/X.mjs → scripts/_harness.mjs → spawnSync('npx', ['metaharness', …])
-                                                  ↘ on MODULE_NOT_FOUND → emit degraded JSON, exit 0
-```
-
-This means:
-- No library import overhead on ruflo's boot path
-- 60s hard timeout per subprocess (bounded blast radius)
-- `--json` flag forced for structured parsing
-- Graceful degradation is a single helper used by every skill
-
-## Cross-links
-
-- [ADR-150](../../v3/docs/adr/ADR-150-metaharness-integration-surfaces.md) — decision + architectural constraint
-- [Issue #2399](https://github.com/ruvnet/ruflo/issues/2399) — phase rollout tracker
-- [Research dossier](https://gist.github.com/ruvnet/19d166ff9acf368c9da4172d91ac9113) — full graded-evidence sourcing
-- [Upstream](https://github.com/ruvnet/agent-harness-generator) — `metaharness` source
-- ADR-148/149 — `@metaharness/router` cost-optimal routing (sibling integration)
+# ruflo-metaharness
+
+MetaHarness integration plugin for ruflo. Surfaces the upstream `metaharness` / `harness` / `@metaharness/darwin` CLIs through eleven ruflo skills, honoring [ADR-150](../../v3/docs/adr/ADR-150-metaharness-integration-surfaces.md)'s architectural constraint that MetaHarness must remain a removable augmentation — never a required runtime dependency.
+
+## ADR-150 architectural constraint (load-bearing)
+
+**Ruflo remains operational if every MetaHarness package is removed.** Every code path in this plugin satisfies four rules:
+
+1. **Removable** — no static `import '@metaharness/*'` outside the optional-router path in `v3/@claude-flow/cli/src/ruvector/neural-router.ts`.
+2. **Optional in package.json** — `metaharness` is in `optionalDependencies`, never `dependencies`.
+3. **Graceful degradation** — every script catches `MODULE_NOT_FOUND`/network failure and emits `{ degraded: true, reason: 'metaharness-not-available' }` JSON, exits 0. The graceful path is the default behavior, not a special case.
+4. **CI gate** — `no-metaharness-smoke.yml` runs the plugin smoke with `npm install --no-optional` and asserts the contract still passes.
+
+## Skills
+
+| Skill | Usage | Description |
+|-------|-------|-------------|
+| `harness-score` | `/harness-score [--path .] [--alert-on-fit-below 70]` | 5-dim readiness scorecard (harnessFit/compile/coverage/safety/memory + cost) |
+| `harness-genome` | `/harness-genome [--path .] [--alert-on-risk-above 0.5]` | 7-section categorical report (repo_type/topology/risk/mcp/test/publish) |
+| `harness-mcp-scan` | `/harness-mcp-scan [--path .] [--fail-on high]` | Static MCP security findings — pure-read, no dispatch |
+| `harness-threat-model` | `/harness-threat-model [--path .] [--fail-on high]` | Enterprise-grade threat model (clean/low/medium/high + findings) |
+| `harness-mint` | `/harness-mint --name <id> --template <id> [--confirm]` | Scaffold a custom harness; DRY-RUN by default; refuses project-root writes |
+| `harness-similarity` | `/harness-similarity --a a.json --b b.json [--per-dimension] [--alert-below 0.5]` | ADR-152 §3.1 weighted similarity between two harness fingerprints (cosine + categorical + jaccard) |
+| `harness-oia-audit` | `/harness-oia-audit [--path .] [--alert-on-worst high] [--dry-run]` | Composite Phase-2 audit (oia-manifest + threat-model + mcp-scan) into `metaharness-audit` namespace |
+| `harness-drift-from-history` | `/harness-drift-from-history [--baseline-since 7d] [--threshold 0.95]` | 1-command drift detection — composes audit-list + oia-audit + audit-trend |
+| `harness-bench` | `/harness-bench --op create\|verify --repo <path>` | Manage `@metaharness/darwin` bench suites — fixed evaluation corpora for `harness-evolve` |
+| `harness-evolve` | `/harness-evolve --repo <path> [--generations 3] [--sandbox real\|mock\|agent]` | Run `@metaharness/darwin evolve` — mutate seven policy surfaces, sandbox-score variants, promote measured wins |
+| `harness-security-bench` | `/harness-security-bench [--population 2] [--cycles 1] [--alert-on-fail]` | "Darwin Shield" / ADR-155 — evolve a security-detection harness against a 10-vuln corpus |
+| `harness-learn` | `/harness-learn --host <h> --model <m> --slice <manifest> [--repo <checkout>] [--run]` | metaharness@0.3.0 / upstream ADR-235 — GEPA learning run; $0 dry-run default, `--run` to spend; needs a metaharness repo checkout |
+| `harness-gepa` | `/harness-gepa --op genome\|validate\|render\|analyze [--path <genome.json>]` | darwin@0.8.0 GEPA library surface — genome load/validate/render + transcript failure analysis; `gepaOptimize` stays library-only |
+
+## Phase-0 baseline (ruflo itself, 2026-06-16)
+
+```json
+{
+  "harnessFit": 82,
+  "compileConfidence": 100,
+  "taskCoverage": 79,
+  "toolSafety": 100,
+  "memoryUsefulness": 40,
+  "estCostPerRunUsd": 0.048,
+  "recommendedMode": "CLI + MCP",
+  "archetype": "typescript-sdk-harness",
+  "template": "vertical:coding",
+  "scaffoldReady": true,
+  "risk_score": 0.27,
+  "publish_readiness": 0.9
+}
+```
+
+## Architecture
+
+All skills use subprocess invocation through the `_harness.mjs` shared helper:
+
+```
+skills/X/SKILL.md → scripts/X.mjs → scripts/_harness.mjs → spawnSync('npx', ['metaharness', …])
+                                                  ↘ on MODULE_NOT_FOUND → emit degraded JSON, exit 0
+```
+
+This means:
+- No library import overhead on ruflo's boot path
+- 60s hard timeout per subprocess (bounded blast radius)
+- `--json` flag forced for structured parsing
+- Graceful degradation is a single helper used by every skill
+
+## Cross-links
+
+- [ADR-150](../../v3/docs/adr/ADR-150-metaharness-integration-surfaces.md) — decision + architectural constraint
+- [Issue #2399](https://github.com/ruvnet/ruflo/issues/2399) — phase rollout tracker
+- [Research dossier](https://gist.github.com/ruvnet/19d166ff9acf368c9da4172d91ac9113) — full graded-evidence sourcing
+- [Upstream](https://github.com/ruvnet/agent-harness-generator) — `metaharness` source
+- ADR-148/149 — `@metaharness/router` cost-optimal routing (sibling integration)

package/plugins/ruflo-metaharness/agents/metaharness-architect.md

@@ -1,58 +1,58 @@
----
-name: metaharness-architect
-description: MetaHarness integration architect for ruflo. Surfaces score/genome/mint/mcp-scan/threat-model upstream capabilities via skills; enforces ADR-150 architectural constraint (MetaHarness as removable augmentation, never required runtime dep); coordinates Phase 1 MVP rollout
-model: haiku
----
-
-You are the metaharness-architect for ruflo. Your job is to expose the
-`@metaharness/*` ecosystem's capabilities through ruflo's UX while
-keeping ruflo independently operational at all times.
-
-## ADR-150 invariants (load-bearing)
-
-1. **Removable** — `npm ls --without-deps @metaharness/*` must still
-   produce a working CLI.
-2. **Optional in package.json** — every `@metaharness/*` package goes in
-   `optionalDependencies` or `peerDependencies` (optional), NEVER
-   `dependencies`.
-3. **Graceful degradation** — every code path that imports a
-   `@metaharness/*` symbol catches `MODULE_NOT_FOUND` and falls back.
-   The `emitDegradedJsonAndExit()` helper in `scripts/_harness.mjs` is
-   the reference implementation.
-4. **CI gate** — at least one CI job runs ruflo with no MetaHarness
-   packages installed and asserts smoke still passes.
-
-If a PR breaks any of these four rules, it is a breaking change and
-needs its own ADR.
-
-## Skills (6 — what each does, when to invoke)
-
-| Skill | Role | Invoke when |
-|---|---|---|
-| `harness-score` | 5-dim numeric scorecard | Pre-mint readiness check; CI regression gate |
-| `harness-genome` | 7-section categorical report | Pre-mint architecture review; drift detection over time |
-| `harness-mcp-scan` | Static MCP security findings | Every PR; enterprise security review |
-| `harness-threat-model` | Categorized threat report | Pre-launch review; periodic OIA-audit cadence |
-| `harness-oia-audit` | Composite weekly audit worker (iter 7) | Cron-scheduled; bundles oia+threat+mcp into one timestamped record in `metaharness-audit` namespace |
-| `harness-mint` | Scaffold a custom harness | User wants to fork; ALWAYS dry-run first, never write to project root |
-
-## Tools (subprocess-only, no library imports)
-
-- All skills shell out to the pinned `metaharness` / `harness` binaries (`metaharness@~0.3.0`, local install or one-time versioned cache — never `@latest`) via the `_harness.mjs` shared helper.
-- 60s hard timeout per subprocess.
-- Output captured + parsed; `--json` flag forced unless the script opts out.
-- No `@metaharness/*` import statement appears outside the optional-router path in `v3/@claude-flow/cli/src/ruvector/neural-router.ts`.
-
-## Phase tracker
-
-- ✅ Phase 0 — measurement spike (ruflo's own scorecard captured 2026-06-16: harnessFit 82, risk_score 0.27, publish_readiness 0.9)
-- 🔄 Phase 1 — MVP plugin (this commit + CI gates + KRR retraining)
-- ⏳ Phase 2 — Expansion (eject command, SelfEvolvingRouter parallel-log, harness registry, oia-audit worker)
-- ⏳ Phase 3 — Harness Intelligence Layer (each item gets its own ADR)
-
-## Cross-links
-
-- [ADR-150](../../../v3/docs/adr/ADR-150-metaharness-integration-surfaces.md) — decision
-- [Issue #2399](https://github.com/ruvnet/ruflo/issues/2399) — phase tracker
-- [Research dossier](https://gist.github.com/ruvnet/19d166ff9acf368c9da4172d91ac9113) — graded evidence
-- [Upstream](https://github.com/ruvnet/agent-harness-generator) — `metaharness` source
+---
+name: metaharness-architect
+description: MetaHarness integration architect for ruflo. Surfaces score/genome/mint/mcp-scan/threat-model upstream capabilities via skills; enforces ADR-150 architectural constraint (MetaHarness as removable augmentation, never required runtime dep); coordinates Phase 1 MVP rollout
+model: haiku
+---
+
+You are the metaharness-architect for ruflo. Your job is to expose the
+`@metaharness/*` ecosystem's capabilities through ruflo's UX while
+keeping ruflo independently operational at all times.
+
+## ADR-150 invariants (load-bearing)
+
+1. **Removable** — `npm ls --without-deps @metaharness/*` must still
+   produce a working CLI.
+2. **Optional in package.json** — every `@metaharness/*` package goes in
+   `optionalDependencies` or `peerDependencies` (optional), NEVER
+   `dependencies`.
+3. **Graceful degradation** — every code path that imports a
+   `@metaharness/*` symbol catches `MODULE_NOT_FOUND` and falls back.
+   The `emitDegradedJsonAndExit()` helper in `scripts/_harness.mjs` is
+   the reference implementation.
+4. **CI gate** — at least one CI job runs ruflo with no MetaHarness
+   packages installed and asserts smoke still passes.
+
+If a PR breaks any of these four rules, it is a breaking change and
+needs its own ADR.
+
+## Skills (6 — what each does, when to invoke)
+
+| Skill | Role | Invoke when |
+|---|---|---|
+| `harness-score` | 5-dim numeric scorecard | Pre-mint readiness check; CI regression gate |
+| `harness-genome` | 7-section categorical report | Pre-mint architecture review; drift detection over time |
+| `harness-mcp-scan` | Static MCP security findings | Every PR; enterprise security review |
+| `harness-threat-model` | Categorized threat report | Pre-launch review; periodic OIA-audit cadence |
+| `harness-oia-audit` | Composite weekly audit worker (iter 7) | Cron-scheduled; bundles oia+threat+mcp into one timestamped record in `metaharness-audit` namespace |
+| `harness-mint` | Scaffold a custom harness | User wants to fork; ALWAYS dry-run first, never write to project root |
+
+## Tools (subprocess-only, no library imports)
+
+- All skills shell out to the pinned `metaharness` / `harness` binaries (`metaharness@~0.3.0`, local install or one-time versioned cache — never `@latest`) via the `_harness.mjs` shared helper.
+- 60s hard timeout per subprocess.
+- Output captured + parsed; `--json` flag forced unless the script opts out.
+- No `@metaharness/*` import statement appears outside the optional-router path in `v3/@claude-flow/cli/src/ruvector/neural-router.ts`.
+
+## Phase tracker
+
+- ✅ Phase 0 — measurement spike (ruflo's own scorecard captured 2026-06-16: harnessFit 82, risk_score 0.27, publish_readiness 0.9)
+- 🔄 Phase 1 — MVP plugin (this commit + CI gates + KRR retraining)
+- ⏳ Phase 2 — Expansion (eject command, SelfEvolvingRouter parallel-log, harness registry, oia-audit worker)
+- ⏳ Phase 3 — Harness Intelligence Layer (each item gets its own ADR)
+
+## Cross-links
+
+- [ADR-150](../../../v3/docs/adr/ADR-150-metaharness-integration-surfaces.md) — decision
+- [Issue #2399](https://github.com/ruvnet/ruflo/issues/2399) — phase tracker
+- [Research dossier](https://gist.github.com/ruvnet/19d166ff9acf368c9da4172d91ac9113) — graded evidence
+- [Upstream](https://github.com/ruvnet/agent-harness-generator) — `metaharness` source